CVE · Medium

CVE-2026-120737 — Missing Authorization

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-120737 Missing Authorization Missing Authorization Medium 5.9 < 4.62.0 4.62.0 2026-11-07 —

CVE-2026-120737 is a Missing Authorization vulnerability in the WordPress plugin jupiterx-core (jupiterx-core). Versions up to and including 4.62.0 are affected; no patched version is recorded. CVSS score: 5.9 (Medium). Published 2026-11-07.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.